zram: avoid access beyond the zram device
authorJiang Liu <liuj97@gmail.com>
Thu, 6 Jun 2013 16:07:26 +0000 (00:07 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 12 Aug 2013 01:35:24 +0000 (18:35 -0700)
commit408fd687175ed6a1fea8cb901882c369ce1d4478
treed8ae07983e1c0b8c72a81b9e5b70d72e59e7d88a
parentf7b071d02492426c5b5c1086fe082ba7a0de6de8
zram: avoid access beyond the zram device

commit 12a7ad3b810e77137d0caf97a6dd97591e075b30 upstream.

Function valid_io_request() should verify the entire request are within
the zram device address range. Otherwise it may cause invalid memory
access when accessing/modifying zram->meta->table[index] because the
'index' is out of range. Then it may access non-exist memory, randomly
modify memory belong to other subsystems, which is hard to track down.

Signed-off-by: Jiang Liu <jiang.liu@huawei.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/zram/zram_drv.c